https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:21:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-275062 EUVD-2026-275062 https://cve.radiocsirt.org/vuln/euvd-2026-275062 https://cve.radiocsirt.org/vuln/fkie_cve-2026-29065 <p>changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4.</p> <p>changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-29065 https://cve.radiocsirt.org/vuln/ghsa-25g8-2mcf-fcx9 <p><strong>Affected:</strong> PyPI: changedetection.io</p> <p>### Summary A Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives.</p> <p>### Details</p> <p>A Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. The application uses zipfile.extractall() without validating entry paths, allowing ../ sequences to escape the extraction directory.</p> <p>Vulnerable Code (lines 50-53): ``` def restore_backup(self, filename): with zipfile.ZipFile(filename, &#39;r&#39;) as zip_ref: # VULNERABLE: No path validation before extraction zip_ref.extractall(self.datastore_path) ``` The extractall() function preserves the relative paths stored within the ZIP archive. When a malicious ZIP contains entries with ../ path traversal sequences, these files are extracted outside the intended directory.</p> <p>| Path in ZIP | Target File | Impact | | --- | --- | --- | | ../secret.txt | Flask secret key | Session forgery, auth bypass | | ../changedetection.json | App settings | Disable password, inject backdoor | | ../url-watches.json | Watch index | Inject malicious watches | | ../{uuid}/watch.json | Watch config | Modify any watch |</p> <p>Attacker uploads ZIP via the backup restore functionality at /backups/restore Application extracts files without validation, writing attacker content to sensitive locations</p> <p>### PoC</p> <p>Step 1: Create Malicious ZIP ``` import zipfile import json</p> <p>with zipfile.ZipFile(&#34;zipslip.zip&#34;,…</p> <p><strong>Affected:</strong> PyPI: changedetection.io</p> <p>### Summary A Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives.</p> <p>### Details</p> <p>A Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. The application uses zipfile.extractall() without validating entry paths, allowing ../ sequences to escape the extraction directory.</p> <p>Vulnerable Code (lines 50-53): ``` def restore_backup(self, filename): with zipfile.ZipFile(filename, &#39;r&#39;) as zip_ref: # VULNERABLE: No path validation before extraction zip_ref.extractall(self.datastore_path) ``` The extractall() function preserves the relative paths stored within the ZIP archive. When a malicious ZIP contains entries with ../ path traversal sequences, these files are extracted outside the intended directory.</p> <p>| Path in ZIP | Target File | Impact | | --- | --- | --- | | ../secret.txt | Flask secret key | Session forgery, auth bypass | | ../changedetection.json | App settings | Disable password, inject backdoor | | ../url-watches.json | Watch index | Inject malicious watches | | ../{uuid}/watch.json | Watch config | Modify any watch |</p> <p>Attacker uploads ZIP via the backup restore functionality at /backups/restore Application extracts files without validation, writing attacker content to sensitive locations</p> <p>### PoC</p> <p>Step 1: Create Malicious ZIP ``` import zipfile import json</p> <p>with zipfile.ZipFile(&#34;zipslip.zip&#34;,…</p> https://cve.radiocsirt.org/vuln/ghsa-25g8-2mcf-fcx9 https://cve.radiocsirt.org/vuln/pysec-2026-2129 <p><strong>Affected:</strong> PyPI: changedetection-io</p> <p>changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4.</p> <p><strong>Affected:</strong> PyPI: changedetection-io</p> <p>changedetection.io is a free open source web page change detection tool. Prior to version 0.54.4, a Zip Slip vulnerability in the backup restore functionality allows arbitrary file overwrite via path traversal in uploaded ZIP archives. This issue has been patched in version 0.54.4.</p> https://cve.radiocsirt.org/vuln/pysec-2026-2129